Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: 40quz3v8MEOgOlt9Txr9dKREx3naEG4WCN6RJv7qgeM=
Subject key identifier: 42:10:FA:08:84:AF:44:73:96:A6:E7:01:C0:7F:F9:A9:59:D5:CB:C4
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019EBDDA0E82CDED38AA483CFCB8D0C4CABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 10A4
Signing time: Fri 12 Jun 2026 22:00:44 +0000
Manifest this update: Fri 12 Jun 2026 22:00:44 +0000
Manifest next update: Sat 13 Jun 2026 22:00:44 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 8cRrpCzqyk4g7gYDP0sPGw+4WyMCJp1s+YFL6bWckFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:0e:82:cd:ed:38:aa:48:3c:fc:b8:d0:c4:ca:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Jun 12 22:00:44 2026 GMT
Not After : Jun 13 22:00:44 2026 GMT
Subject: CN=4210fa0884af447396a6e701c07ff9a959d5cbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:48:6a:56:6f:a2:d2:e2:6d:17:b6:30:ed:
78:8f:76:be:2c:07:f0:6b:45:1a:e6:8d:77:30:f1:
a4:38:95:82:81:7d:96:ab:71:b5:26:56:64:b6:f8:
05:d5:5a:cf:62:33:34:5e:e3:2f:26:ae:87:d0:dc:
9a:9c:d0:b8:6f:31:bc:6c:a2:eb:1d:05:a9:e3:40:
26:73:07:cd:71:14:3b:50:5e:24:17:a4:55:1f:c9:
92:74:d6:5f:70:c4:55:fd:49:42:59:55:62:59:97:
93:a7:1b:b4:72:76:e5:5f:cd:49:4f:b5:b3:50:3b:
0a:ae:b9:ce:38:c7:a3:11:d2:29:7c:c7:2f:a4:02:
94:b0:51:8c:9d:13:33:c7:da:65:46:be:57:4a:09:
24:60:a5:4d:42:6d:3a:29:03:39:f2:04:96:f8:03:
d1:b5:b0:b5:c0:55:13:41:ff:56:de:b3:67:47:36:
c1:38:a3:b5:b0:92:5d:09:c9:d9:52:85:73:8b:ba:
65:90:15:6e:fd:f0:8e:07:74:4b:80:72:0a:45:c4:
04:70:d8:a6:e4:9a:0d:a8:95:d8:9d:bf:ea:81:e4:
0e:2d:97:da:7a:dd:f7:3f:83:58:11:e6:6e:35:72:
ce:6a:83:48:e6:25:19:51:58:22:5c:80:da:b8:71:
db:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:10:FA:08:84:AF:44:73:96:A6:E7:01:C0:7F:F9:A9:59:D5:CB:C4
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:68:a3:3d:3c:e9:8f:e6:6e:86:56:44:d9:bb:71:a5:31:7c:
ad:4b:2c:7a:41:49:08:18:f9:fe:9d:8c:22:b3:3e:d3:d9:c8:
f7:60:0a:da:29:36:37:e7:1e:12:7a:d5:ab:e2:2e:e5:af:50:
34:a4:1a:78:67:49:61:f6:23:c8:ba:98:9b:1c:1c:3f:af:53:
ad:37:c6:56:74:4c:08:92:93:25:06:77:9c:c4:bd:2b:67:a0:
76:82:ad:1e:b4:04:67:0b:6f:e7:40:2b:dd:2d:c9:ef:07:40:
58:b6:64:20:3f:fa:94:a0:c8:e8:b4:f1:58:91:ed:c3:7f:dd:
ca:56:ec:c5:0b:8c:20:ed:17:83:3c:26:7d:e3:cd:50:0a:7c:
43:68:2d:f6:42:f6:6e:10:27:0c:7f:e2:88:8c:92:95:8f:4a:
8d:47:3a:e3:ee:9f:59:17:05:82:e4:12:9c:6c:53:b3:ed:d8:
c4:c2:a4:cd:2f:a8:42:60:8f:e7:91:47:86:23:2a:14:bc:3b:
1e:3b:ac:5f:b8:4f:07:45:96:43:00:b8:27:9e:45:ee:74:c6:
24:79:f7:b0:f6:62:be:e9:d6:a2:b2:b1:f5:f0:4d:a2:8e:36:
51:2d:2d:be:86:d3:67:3e:68:bf:57:23:17:28:be:70:b9:33:
b3:9f:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:07 2026 by rpki-client